Описание
vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers are not set. This issue has been addressed in commit 68dfa6614 which is expected to be included in future releases. Users are advised to upgrade when a new release is made. While an upgrade path is not available users may modify the docker image build to insert the headers into nginx.
Ссылки
- Patch
- Vendor Advisory
- Patch
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.2.0 (включая)
cpe:2.3:a:vantage6:vantage6-ui:*:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00122
Низкий
5.4 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-668
EPSS
Процентиль: 32%
0.00122
Низкий
5.4 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-668